A few months back, the
Researchers determined that the median annualized cost of cyber crime of 45 organizations studied is $3.8 million per year. The range was $1 million to $52 million per year per company.
The
“The companies in our study experienced 50 successful attacks per week and more than one successful attack per company per week,” the report states.
The most costly cyber crimes are those caused by Web attacks, malicious code and malicious insiders, which account for more than 90% of all cyber crime costs per organization on an annual basis.
Even more eye opening is the length of time it takes to deal with security incidents. Speed seems to matter. A great deal of the costs appear to be related to how quickly companies can respond to and resolve attacks. On average, Ponemon found, companies expend $247,757 every 14 days or $17,696 per day per attack. The average amount of time to resolve a malicious code attack is 39 days; 30 days to deal with malicious insiders, and 19 days to resolve a Web attack.
But here's the rub: Whether it's within a month or less, these incidents are only resolved if managers and administrators are aware if the breach is taking place. There may be many instances where breaches could go on for months and even years with no knowledge of what's going on. What can help spot discrepancies? Auditing, for one—while it won't prevent breaches, it may help stop ongoing data leaks. In my own survey work in this area, there is still precious little auditing taking place.
Joe McKendrick is an author, consultant, blogger and frequent INN contributor specializing in information technology.
Readers are encouraged to respond to Joe using the “Add Your Comments” box below. He can also be reached at
This blog was exclusively written for Insurance Networking News. It may not be reposted or reused without permission from Insurance Networking News.
The opinions of bloggers on